Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa
File:                     b8f411d6-7dc7-3807-96c9-27e04f865d91.roa (raw, json)
Hash identifier:          /vJ+exvyfifpEJ8qDY6EYvODdPqTxqS9MW65vR+C6/M=
Subject key identifier:   0F:96:90:A8:BB:57:56:51:C9:2F:05:C7:CA:E6:5D:5F:F3:BE:78:0B
Certificate issuer:       /CN=ea962f40-5514-411b-b23b-2a5e787628d5
Certificate serial:       010D0C9F4328584823953E3BABB00A4430CEA600
Authority key identifier: 95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     401336
IP address blocks:        2602:f81b::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:3e:3b:ab:b0:0a:44:30:ce:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea962f40-5514-411b-b23b-2a5e787628d5
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=25105f0d-6715-4e3e-a577-9ca7df8cdd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:7e:2a:f1:57:be:c1:32:e0:ff:e1:87:90:
                    03:9b:d9:ab:a9:d1:25:0c:9e:ec:c0:21:88:86:62:
                    b4:9f:78:a8:1d:30:ce:42:90:2c:55:14:c5:aa:d4:
                    8e:aa:00:d8:e1:88:5c:0c:a2:02:df:1a:d8:e7:ac:
                    f4:3b:42:71:da:9e:b1:a6:ff:c3:a9:2d:3e:10:a3:
                    ab:e8:20:f3:01:51:05:5e:34:40:6f:e0:fe:04:c1:
                    76:d1:69:70:69:b4:78:8a:e0:62:bf:5d:16:75:d0:
                    07:35:f6:51:c8:50:22:2c:ec:4b:13:a6:38:ab:b1:
                    1c:f0:75:30:e5:61:0c:e8:e1:e6:79:1c:4d:10:33:
                    cd:0b:ed:85:2e:1d:d2:1e:9a:14:8b:74:fb:44:0b:
                    99:38:a5:c7:f3:cc:18:67:60:83:aa:b5:98:be:b4:
                    4d:37:0b:b6:74:d9:d9:82:eb:1c:a5:10:a7:6f:3b:
                    58:55:b6:7b:84:c2:28:28:99:d3:04:79:6b:ba:ac:
                    d1:c9:4b:ff:4c:d5:00:ab:dd:14:7e:f5:6d:a3:3e:
                    cc:2f:50:d1:28:04:39:f0:99:84:57:1d:54:2a:e8:
                    f2:9e:81:df:d2:99:0e:02:f2:83:ba:0e:c3:cc:10:
                    ba:1c:43:d4:88:93:0a:b6:b7:f8:15:25:30:b7:ce:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:90:A8:BB:57:56:51:C9:2F:05:C7:CA:E6:5D:5F:F3:BE:78:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl

            X509v3 Authority Key Identifier:
                keyid:95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f81b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:85:ee:d4:b0:95:94:00:23:d7:6e:38:fc:20:7d:a0:f3:9c:
         9c:03:af:b1:89:c7:fc:6f:f9:5f:ca:70:2e:58:cf:08:4f:a2:
         91:d5:81:64:a7:47:b5:89:b9:75:33:75:90:57:4c:5b:e5:f9:
         3d:31:5e:7c:f4:b3:ac:ed:40:c8:01:90:6f:35:6f:b2:ad:1a:
         34:49:0c:fd:7c:5e:52:f0:f2:ce:7f:ca:c7:f2:0a:7a:9b:e7:
         ac:75:97:aa:b5:ad:12:f8:5c:07:d9:c8:1d:d4:2c:9a:13:2c:
         82:2f:1a:eb:e5:c2:1b:70:b1:ab:18:5b:75:36:61:68:3c:f6:
         25:1b:9b:86:9a:e3:b5:ef:e6:be:4d:9b:64:98:c1:f9:dd:a1:
         99:6b:8b:31:f8:93:00:af:27:ca:8a:69:2d:17:53:3c:76:d0:
         b4:f7:52:0d:01:ef:a1:9b:55:cc:f7:e4:48:cd:a1:d9:81:61:
         63:23:36:65:ef:60:a2:b7:a9:53:c3:9d:ba:dc:7d:cd:8a:18:
         67:2d:5d:df:9f:4e:11:ab:ba:2b:10:e7:92:b5:4e:8d:65:7c:
         2c:02:d5:ba:50:ec:17:c5:a1:57:1b:ad:1a:07:cc:5e:fa:18:
         32:a1:2e:48:3b:9d:ad:d7:fe:bd:59:62:66:41:6f:73:08:7f:
         79:3c:d0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:20 2025 by rpki-client